$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft File: mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json) Hash identifier: PH3wwXV5pjlmbw+rtKg35tz1V+WC/maBcDGbGkUQevY= Subject key identifier: A8:B6:95:80:C9:1A:8E:90:9C:51:F8:57:60:41:56:07:2C:B3:01:06 Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC Certificate issuer: /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC Certificate serial: 10EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft Manifest number: 10D3 Signing time: Sat 18 May 2024 17:53:22 +0000 Manifest this update: Sat 18 May 2024 17:53:21 +0000 Manifest next update: Sat 25 May 2024 17:53:21 +0000 Files and hashes: 1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: Nkr2Qvy/yUqh5AdMTWY9kpM2pBm8ulZE+ubd0i5Cb7I=) 2: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: NSIrfcEof4oSoVl+Wv6M+0oFTgwzHJSzBT22S0GWuXE=) 3: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: hlWJdj7oasSspsBwnWP5G9gzTFzy6dpFODxTYQ9Vfc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4334 (0x10ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC Validity Not Before: May 18 17:53:21 2024 GMT Not After : May 25 17:53:21 2024 GMT Subject: CN=6648eb12-f73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:41:11:2d:9d:75:2b:2c:ed:89:35:a3:41: 75:a9:50:c2:b2:e7:89:b1:60:16:6b:c9:50:d0:73: 31:8e:24:ab:80:6b:50:41:27:b3:de:bd:3e:ab:82: 99:87:c7:ee:a0:7f:72:15:ed:ff:67:af:d1:aa:41: 98:4a:dd:fa:06:c1:02:77:83:01:87:ef:34:f3:be: a3:5a:3b:cf:c4:40:15:48:0c:ee:35:ee:1f:56:de: 84:f9:ff:c7:8a:44:d5:ff:02:c9:2e:a8:dc:3a:ea: 00:59:dd:33:4d:c2:d4:21:13:c4:d9:50:07:67:cd: 75:1c:a7:e9:b6:da:e6:3a:3b:8a:5d:d8:a4:50:6f: c1:ca:60:a0:9b:8d:92:ff:3c:46:f1:01:1b:5d:50: d9:c2:cc:b8:be:7a:5d:ec:d8:7c:aa:2d:ee:34:ae: 9c:d7:3d:e1:cb:f2:ef:00:9e:22:88:c6:12:7d:11: 34:e4:01:c8:02:6c:7a:72:d2:77:8c:55:f8:70:2a: 34:c1:73:7a:f5:ca:0b:51:0f:51:dc:d0:1a:2b:89: 36:dc:be:7f:fc:6c:97:1b:6b:d9:29:e5:85:70:48: eb:79:52:ad:06:84:a4:4d:0c:56:26:1d:9c:45:8f: b7:d0:36:dc:b3:cb:a2:fd:0b:13:d0:17:9d:e2:0a: a8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:95:80:C9:1A:8E:90:9C:51:F8:57:60:41:56:07:2C:B3:01:06 X509v3 Authority Key Identifier: keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:8e:02:40:79:8b:5a:ee:2d:c3:b2:96:48:89:d4:49:5f:c1: 3c:ed:17:4c:15:fd:a4:49:f6:88:5d:a6:23:43:f0:47:d8:92: 2a:0d:be:f2:a0:8b:ca:fb:51:e5:2c:8e:f0:02:65:06:51:c9: a9:ef:28:83:0a:1a:99:db:4e:d3:ec:36:5d:40:42:02:2d:b6: 4f:12:2b:9c:75:3b:e3:f8:b3:93:cb:fb:dd:3c:a5:d2:aa:0c: e8:56:97:0f:89:72:57:71:af:d9:14:01:cd:65:b4:65:f5:45: 11:6d:7d:94:40:e0:08:cd:4d:28:7b:4e:fa:f4:8f:10:b6:49: c0:46:84:f7:a3:1f:5b:09:3d:38:3f:77:23:ff:43:4d:a9:d0: b5:72:56:9c:a5:57:70:b0:c7:76:9e:5f:af:21:34:bf:d2:de: 2c:5e:a6:16:84:ae:50:bd:c1:b2:14:59:07:25:90:87:59:24: 40:0f:db:ca:62:1e:32:c5:47:f8:2c:ce:fd:2f:02:81:c4:70: 1c:2b:c1:54:e6:8c:f1:25:85:e2:63:bd:9d:fe:b4:50:37:84: 53:5f:0a:83:e8:1e:11:84:14:13:9f:af:f4:ee:25:82:91:a7: 84:3d:f2:74:cc:6b:c4:82:9b:9e:95:88:bd:3b:3b:2e:2d:c4: 1f:42:dc:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGQkMxMTAvBgNVBAUTKDk4QjIzQ0JBQjE4NERBQjFBRDAwRDEwMDBCODIwQzlC MjFBNDMzRUMwHhcNMjQwNTE4MTc1MzIxWhcNMjQwNTI1MTc1MzIxWjAYMRYwFAYD VQQDEw02NjQ4ZWIxMi1mNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqq9BES2ddSss7Yk1o0F1qVDCsueJsWAWa8lQ0HMxjiSrgGtQQSez3r0+q4KZ h8fuoH9yFe3/Z6/RqkGYSt36BsECd4MBh+80876jWjvPxEAVSAzuNe4fVt6E+f/H ikTV/wLJLqjcOuoAWd0zTcLUIRPE2VAHZ811HKfpttrmOjuKXdikUG/BymCgm42S /zxG8QEbXVDZwsy4vnpd7Nh8qi3uNK6c1z3hy/LvAJ4iiMYSfRE05AHIAmx6ctJ3 jFX4cCo0wXN69coLUQ9R3NAaK4k23L5//GyXG2vZKeWFcEjreVKtBoSkTQxWJh2c RY+30Dbcs8ui/QsT0Bed4gqo4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKi2lYDJ Go6QnFH4V2BBVgcsswEGMB8GA1UdIwQYMBaAFJiyPLqxhNqxrQDRAAuCDJshpDPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZCQy9BMzM1QjI1OEZD RTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJyR3RBTkVBQzRJTW15R2tN LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MSTh1ckdFMnJHdEFORUFDNElNbXlHa00tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZCQy9BMzM1QjI1OEZDRTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJy R3RBTkVBQzRJTW15R2tNLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnjgJAeYta7i3DspZIidRJX8E87RdMFf2kSfaIXaYjQ/BH2JIqDb7y oIvK+1HlLI7wAmUGUcmp7yiDChqZ207T7DZdQEICLbZPEiucdTvj+LOTy/vdPKXS qgzoVpcPiXJXca/ZFAHNZbRl9UURbX2UQOAIzU0oe0769I8QtknARoT3ox9bCT04 P3cj/0NNqdC1clacpVdwsMd2nl+vITS/0t4sXqYWhK5QvcGyFFkHJZCHWSRAD9vK Yh4yxUf4LM79LwKBxHAcK8FU5ozxJYXiY72d/rRQN4RTXwqD6B4RhBQTn6/07iWC kaeEPfJ0zGvEgpuelYi9OzsuLcQfQtxy -----END CERTIFICATE-----Generated at Sat May 18 19:15:25 2024 by rpki-client on console-ams.rpki-client.org